CVE-2016-4728

Description

WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error prototypes, which allows remote attackers to execute arbitrary code via a crafted web site.

References

https://support.apple.com/HT207158

https://support.apple.com/HT207157

https://support.apple.com/HT207143

https://support.apple.com/HT207142

http://www.securitytracker.com/id/1036854

http://www.securityfocus.com/bid/93064

http://lists.apple.com/archives/security-announce/2016/Sep/msg00012.html

http://lists.apple.com/archives/security-announce/2016/Sep/msg00011.html

http://lists.apple.com/archives/security-announce/2016/Sep/msg00008.html

http://lists.apple.com/archives/security-announce/2016/Sep/msg00007.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3